bastionguard::rootguard::Policy Struct Reference

#include <Policy.hpp>

Public Attributes
std::uint32_t	version {2}
Mode	mode {Mode::Audit}
Action	unknownAction {Action::Audit}
Action	metadataAction {Action::Audit}
Action	globalMetadataAction {Action::Audit}
Action	credentialAnomalyAction {Action::Audit}
bool	allowMissingPaths {true}
bool	requireRootOwnedTrustedExecutables {true}
bool	protectTrustedExecutables {true}
bool	monitorGlobalPrivilegeMetadata {true}
bool	detectGlobalMetadataBursts {true}
std::uint32_t	globalMetadataSampleLimit {3}
std::uint32_t	metadataBurstThreshold {32}
std::uint32_t	metadataBurstWindowMs {5000}
std::uint32_t	metadataBurstCooldownMs {300000}
bool	ignoreRunGlobalMetadata {true}
bool	logTrusted {true}
bool	autoBlockSystemServices {true}
bool	blockUserHome {false}
std::uint32_t	integrityPollSeconds {5}
std::filesystem::path	eventLog {"/var/log/bastionguard/rootguard-events.jsonl"}
std::vector< PolicyPath >	trustedApplications
std::vector< PolicyPath >	trustedExecutables
std::vector< PolicyPath >	deniedExecutables
std::vector< PolicyPath >	protectedPaths
std::vector< PolicyPath >	ignoredPaths

Detailed Description

Definition at line 27 of file Policy.hpp.

Member Data Documentation

allowMissingPaths

bool bastionguard::rootguard::Policy::allowMissingPaths {true}

Definition at line 34 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), and bastionguard::rootguard::PolicyLoader::loadFromText().

autoBlockSystemServices

bool bastionguard::rootguard::Policy::autoBlockSystemServices {true}

Definition at line 51 of file Policy.hpp.

Referenced by bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), and anonymous_namespace{main.cpp}::writeRuntimeStatus().

blockUserHome

bool bastionguard::rootguard::Policy::blockUserHome {false}

Definition at line 52 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), anonymous_namespace{main.cpp}::writeRuntimePolicyView(), and anonymous_namespace{main.cpp}::writeRuntimeStatus().

credentialAnomalyAction

Action bastionguard::rootguard::Policy::credentialAnomalyAction {Action::Audit}

Definition at line 33 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), anonymous_namespace{main.cpp}::auditRuntimePolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), and bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate().

deniedExecutables

std::vector<PolicyPath> bastionguard::rootguard::Policy::deniedExecutables

Definition at line 57 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

detectGlobalMetadataBursts

bool bastionguard::rootguard::Policy::detectGlobalMetadataBursts {true}

Definition at line 42 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

eventLog

std::filesystem::path bastionguard::rootguard::Policy::eventLog {"/var/log/bastionguard/rootguard-events.jsonl"}

Definition at line 54 of file Policy.hpp.

Referenced by bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{ActionHelper.cpp}::logAction(), and main().

globalMetadataAction

Action bastionguard::rootguard::Policy::globalMetadataAction {Action::Audit}

Definition at line 32 of file Policy.hpp.

Referenced by anonymous_namespace{main.cpp}::auditRuntimePolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimeStatus().

globalMetadataSampleLimit

std::uint32_t bastionguard::rootguard::Policy::globalMetadataSampleLimit {3}

Definition at line 43 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

ignoredPaths

std::vector<PolicyPath> bastionguard::rootguard::Policy::ignoredPaths

Definition at line 59 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), anonymous_namespace{ActionHelper.cpp}::isIgnoredPath(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

ignoreRunGlobalMetadata

bool bastionguard::rootguard::Policy::ignoreRunGlobalMetadata {true}

Definition at line 49 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), and bastionguard::rootguard::PolicyLoader::loadFromText().

integrityPollSeconds

std::uint32_t bastionguard::rootguard::Policy::integrityPollSeconds {5}

Definition at line 53 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), and bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate().

logTrusted

bool bastionguard::rootguard::Policy::logTrusted {true}

Definition at line 50 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), and bastionguard::rootguard::PolicyLoader::loadFromText().

metadataAction

Action bastionguard::rootguard::Policy::metadataAction {Action::Audit}

Definition at line 31 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), anonymous_namespace{main.cpp}::auditRuntimePolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), and anonymous_namespace{main.cpp}::writeRuntimeStatus().

metadataBurstCooldownMs

std::uint32_t bastionguard::rootguard::Policy::metadataBurstCooldownMs {300000}

Definition at line 46 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

metadataBurstThreshold

std::uint32_t bastionguard::rootguard::Policy::metadataBurstThreshold {32}

Definition at line 44 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

metadataBurstWindowMs

std::uint32_t bastionguard::rootguard::Policy::metadataBurstWindowMs {5000}

Definition at line 45 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

mode

Mode bastionguard::rootguard::Policy::mode {Mode::Audit}

Definition at line 29 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), anonymous_namespace{main.cpp}::auditRuntimePolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::loadPolicy(), anonymous_namespace{main.cpp}::printPolicySummary(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimeStatus().

monitorGlobalPrivilegeMetadata

bool bastionguard::rootguard::Policy::monitorGlobalPrivilegeMetadata {true}

Definition at line 39 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

protectedPaths

std::vector<PolicyPath> bastionguard::rootguard::Policy::protectedPaths

Definition at line 58 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), anonymous_namespace{ActionHelper.cpp}::isProtectedPath(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

protectTrustedExecutables

bool bastionguard::rootguard::Policy::protectTrustedExecutables {true}

Definition at line 36 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), and bastionguard::rootguard::PolicyLoader::loadFromText().

requireRootOwnedTrustedExecutables

bool bastionguard::rootguard::Policy::requireRootOwnedTrustedExecutables {true}

Definition at line 35 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), and bastionguard::rootguard::PolicyLoader::loadFromText().

trustedApplications

std::vector<PolicyPath> bastionguard::rootguard::Policy::trustedApplications

Definition at line 55 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

trustedExecutables

std::vector<PolicyPath> bastionguard::rootguard::Policy::trustedExecutables

Definition at line 56 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate(), and anonymous_namespace{main.cpp}::writeRuntimePolicyView().

unknownAction

Action bastionguard::rootguard::Policy::unknownAction {Action::Audit}

Definition at line 30 of file Policy.hpp.

Referenced by bastionguard::rootguard::RootGuardEngine::applyPolicy(), anonymous_namespace{main.cpp}::auditRuntimePolicy(), bastionguard::rootguard::PolicyLoader::loadFromText(), anonymous_namespace{main.cpp}::printPolicySummary(), and bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate().

version

std::uint32_t bastionguard::rootguard::Policy::version {2}

Definition at line 28 of file Policy.hpp.

Referenced by bastionguard::rootguard::PolicyLoader::loadFromText(), and bastionguard::rootguard::anonymous_namespace{PolicyLoader.cpp}::validate().

---

The documentation for this struct was generated from the following file:

• BastionGuard/src/rootguard/include/rootguard/Policy.hpp